Privacy Notice
What data ErinSites processes, why, for how long and your rights.
Illustrative image
Controller: ErinSites · Tarragona (Spain). Contact: contact form. Last updated 5 November 2026.
What we process
- Visitor badges and reports (votes, "I was here", tips, stories, corrections, questions): we store what you write, the page, the date and a one-way hash of your IP address, browser and a yearly secret. We never store your IP address. The hash lets us allow one vote per badge and limit abuse. Legal basis: our legitimate interest in keeping the site useful and free of spam.
- Contact form: your name (optional), email and message, to answer you. Legal basis: your request.
- My places, passport and routes are stored only in your browser (localStorage); we never receive them.
- "Near me" uses your location only inside your browser.
Retention
Rejected submissions and contact messages are deleted within 2 years; approved community content stays while the page exists. You can ask us to delete anything you sent.
Third parties
Map tiles are loaded from OpenStreetMap servers and photos from Wikimedia Commons; like any web request they receive your IP address.
- Google Analytics 4 via Google Tag Manager (GTM-KHZMPB8C), provided by Google Ireland Limited, in consent mode: until you press «Accept» it sets no
_gacookie and only sends cookieless pings without identifiers. After you accept it sets_gaand_ga_*(up to 2 years) to count visits and see which pages are useful. Google privacy policy. - Microsoft Clarity, provided by Microsoft Corporation: loaded only after you accept. It records anonymised clicks, scrolling and page heatmaps (form fields are masked) and sets
_clckand_clsk(up to 1 year). Microsoft privacy statement. - Google AdSense, provided by Google Ireland Limited, shows the ads labelled «Advertisement». Until you accept, we ask Google for non-personalised ads only (based on the page, not on you); Google may still use cookies or local storage to limit how often an ad is shown and to fight fraud. If you accept, ads may be personalised. How Google uses information from sites that use its services.
Legal basis: your consent, which you can withdraw at any time with Cookie settings at the bottom of every page. Google and Microsoft may transfer data outside the EU under the EU-US Data Privacy Framework.
Your rights
Under the GDPR you can request access, correction, deletion, restriction or objection, and complain to a supervisory authority (in Ireland the Data Protection Commission; in Spain the AEPD). We reply within one month.